syzkaller login: [ 64.893492] sshd (230) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:27996' (ECDSA) to the list of known hosts. 2025/01/24 23:47:00 fuzzer started 2025/01/24 23:47:01 dialing manager at localhost:40883 [ 67.729280] cgroup: Unknown subsys name 'net' [ 67.796211] cgroup: Unknown subsys name 'cpuset' [ 67.812557] cgroup: Unknown subsys name 'rlimit' [ 73.581464] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 23:47:19 syscalls: 216 2025/01/24 23:47:19 code coverage: enabled 2025/01/24 23:47:19 comparison tracing: enabled 2025/01/24 23:47:19 extra coverage: enabled 2025/01/24 23:47:19 setuid sandbox: enabled 2025/01/24 23:47:19 namespace sandbox: enabled 2025/01/24 23:47:19 Android sandbox: enabled 2025/01/24 23:47:19 fault injection: enabled 2025/01/24 23:47:19 leak checking: enabled 2025/01/24 23:47:19 net packet injection: enabled 2025/01/24 23:47:19 net device setup: enabled 2025/01/24 23:47:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 23:47:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 23:47:19 USB emulation: enabled 2025/01/24 23:47:19 hci packet injection: enabled 2025/01/24 23:47:19 wifi device emulation: enabled 2025/01/24 23:47:19 802.15.4 emulation: enabled 2025/01/24 23:47:19 fetching corpus: 0, signal 0/0 (executing program) 2025/01/24 23:47:21 starting 8 fuzzer processes 23:47:21 executing program 0: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x3d31) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x3ff) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) socketpair(0x28, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000080)={{0x1, 0x2, 0x80, 0x8, 0x9, 0x7ff}, 0x1e4, [0x1f001e0f, 0x8, 0x3, 0x1, 0x2ab2, 0x7ff, 0xaa74, 0x800, 0x0, 0x2, 0x100, 0x9, 0x8000, 0x3ff, 0x6, 0x7fffffff, 0x3ff, 0x4, 0x1000, 0x3, 0x1, 0x10000, 0x2, 0x400, 0x9, 0x7, 0x1, 0x80000001, 0x8, 0x7, 0x3, 0xf7b3, 0x0, 0x3, 0xfe26, 0x8, 0x5, 0x9, 0x5af673bc, 0x101, 0x83c4, 0x6, 0x9, 0x6, 0x6, 0x6, 0x4, 0x7, 0x2, 0x8000, 0x1000, 0x5, 0x7f, 0x6, 0x7fffffff, 0x753, 0x0, 0x2, 0xfffffffd, 0x0, 0x4, 0x0, 0x7f, 0x587, 0x2, 0x1ff, 0x8, 0x0, 0xab1, 0x7, 0x7, 0x7, 0xffff, 0x3cb1, 0x27, 0x6, 0xffff7fff, 0x2, 0x200, 0x9, 0x7, 0x2, 0x2, 0x6, 0x8000, 0xfffffffe, 0x8000, 0x1000, 0xff, 0xfffeffff, 0xffffffff, 0x8, 0x1, 0x100, 0x775, 0x1f, 0x3, 0x5bf4, 0x4d1, 0xb0, 0x9, 0x10001, 0x3, 0x1f, 0x40, 0x7f, 0xffffffff, 0x20, 0x7, 0x80000001, 0x0, 0x8, 0x7, 0x3, 0xffffffff, 0x9, 0x1, 0x855, 0x1, 0x3, 0x9, 0x8, 0x0, 0x4, 0x3, 0x5, 0x9, 0x8, 0x1, 0x6, 0x6, 0x3, 0x2fc1, 0x20, 0x7, 0x2a7311f1, 0x6, 0x9, 0xfffffffe, 0x1, 0xa7b1, 0x5d, 0xfffffe00, 0x0, 0x5, 0x0, 0x8, 0x7, 0xd079, 0x4, 0x7486, 0xfffffff9, 0x7, 0x1000, 0x5, 0x2, 0x4, 0x1000, 0x1, 0x9, 0x200, 0x4, 0x2fa2, 0x7f, 0x7, 0x5, 0xffffffff, 0x4, 0x2, 0x1, 0x8000, 0x7, 0x935, 0x2, 0x3, 0x0, 0x0, 0x101, 0x4, 0x94, 0x8, 0x6, 0x7fff, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7, 0xffff0000, 0xfffffffc, 0x100, 0x2, 0x800, 0x0, 0x9, 0x0, 0x3, 0x1, 0x6, 0x8, 0x1f, 0x7811, 0x2, 0x7ff, 0x1, 0x5, 0x3, 0x8, 0x2a5ec171, 0xfff, 0x1, 0x10000, 0x1, 0x1, 0x81, 0x0, 0x34, 0x2, 0x9, 0x8, 0x6, 0xfff, 0x3, 0x7f, 0x3a274d, 0xff, 0x2, 0x100, 0xfffffffc, 0xffff, 0x9, 0x200, 0x80000000, 0x7, 0x7, 0x3, 0x3, 0x200, 0xa1, 0x5, 0x4, 0x101, 0xb71, 0x10001, 0x0, 0x81, 0x401, 0x2, 0x7, 0x12, 0x5, 0x8000, 0x0, 0x7, 0x6, 0x80, 0x3, 0xff, 0x3, 0x0, 0x1, 0xffffffff, 0x1ff, 0x100, 0x4, 0xac, 0x6, 0x6, 0xff, 0xb22a853a, 0x9, 0x8, 0x10000, 0x40, 0x200, 0x1, 0x94b3, 0x3b8, 0x7fff, 0x80000001, 0x1, 0x800, 0x0, 0x7fffffff, 0x3, 0x3ff, 0x3ff, 0x3, 0x1, 0x0, 0x2, 0xfffff801, 0x6, 0x101, 0x6, 0x2, 0x10000, 0x1, 0x9, 0x8, 0x8, 0x1, 0x6, 0x4, 0x6, 0x20, 0x3f, 0x76, 0x40, 0x520f, 0x5, 0x1ff, 0x67da, 0xfffffff8, 0x3, 0x7fff, 0x5, 0x5, 0x1, 0x9, 0x0, 0x401, 0xfffffbff, 0x5, 0x4, 0x401, 0xfffffffa, 0x20, 0x3, 0x8001, 0x8, 0x5, 0x3, 0xfffffffe, 0x25, 0x7fff, 0x0, 0x80000001, 0xffffffff, 0x4, 0x0, 0x3, 0x9, 0x401, 0x2, 0x1, 0x7, 0x8, 0x0, 0x93ac, 0x1, 0x33, 0x8, 0x7ff, 0x2, 0xfffffffd, 0x8, 0x8001, 0x6, 0x2, 0x4, 0x3ff, 0x4, 0x1095, 0x7, 0x7f, 0x3f, 0x7ff, 0x4000000, 0xfffffed1, 0xffffffff, 0x1, 0x40, 0x401, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x2, 0x4, 0x8, 0x4, 0x43e, 0xac6, 0x8, 0x6, 0x0, 0x5, 0x1000, 0x3, 0x6, 0x3, 0x5, 0x7, 0x706f, 0xfffffff7, 0xfff, 0x1f800, 0x6, 0x1, 0x351, 0x80000001, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x8001, 0x7fff, 0x7f, 0xfffffffa, 0x20, 0x8, 0x3, 0x9, 0x34000000, 0x10000, 0x81, 0x6, 0x8000, 0x37243136, 0x8, 0x884, 0x0, 0x8, 0x9, 0x1, 0x7, 0x2, 0xa2, 0x1, 0x5, 0x9, 0x8, 0x7c, 0x10001, 0x693, 0x8, 0x3f, 0x3, 0x1, 0x3, 0xcc, 0x1000, 0xec, 0xf48f, 0xd304, 0xe6f, 0x3, 0x80000000, 0x200, 0x0, 0x401, 0x38, 0xffffffff, 0x2, 0x200, 0x1, 0x2, 0x9, 0x10001, 0x9, 0x2, 0x4, 0x1f, 0x5, 0xffff, 0x3, 0x8000, 0x4, 0x80000000, 0x8, 0x1, 0x25, 0xffffff80, 0x200, 0x800, 0x1ff, 0x0, 0xfffffff9, 0x8001, 0x2, 0x401, 0x8, 0x5, 0x81, 0x20, 0xd3, 0x3c0f, 0x3, 0xdfec, 0x5, 0x401, 0x5, 0x6, 0x81, 0x400, 0x1000, 0x80000001, 0x200, 0x7, 0x7, 0x0, 0x6, 0x0, 0xfffffe00, 0x0, 0x3, 0x5, 0xe3, 0x9, 0x0, 0x5, 0xd1ef, 0x2, 0x8, 0x4e, 0x4, 0x4, 0x83, 0x9, 0x10001, 0x3, 0x4, 0xff, 0x7fffffff, 0x8, 0xfffff801, 0x6, 0x100, 0x5, 0x1, 0x0, 0x6a06, 0x3ff, 0x5, 0x6, 0x11f, 0xfffffff7, 0x3, 0x6, 0x1, 0x800, 0xfffffeff, 0x40000, 0x100, 0xffffffff, 0x7fff, 0x5, 0x66cfc611, 0x200, 0xfffff8c3, 0x7f, 0x9, 0x9, 0x6, 0x0, 0x1, 0x57, 0x100, 0x5, 0xfffff800, 0xb2, 0x400, 0x6, 0x5, 0x80000001, 0x4, 0x7, 0x3, 0x101, 0x3, 0xb8, 0x8, 0x6, 0xfffffff8, 0x8, 0x0, 0x6, 0x22, 0x383, 0xffff, 0x5, 0xffff, 0x80, 0x9, 0x1, 0x8, 0x7f, 0x8, 0x4, 0x3, 0x0, 0x1ff, 0x1, 0x725, 0x8, 0x3, 0x1, 0x7f, 0x91d, 0x5, 0x7f, 0x80000000, 0x5a353341, 0x1ff, 0x0, 0x2, 0x80000001, 0x2, 0x200, 0x6, 0x100, 0x8, 0x7, 0x8, 0x3ff, 0x8, 0x1ff, 0x1, 0x6, 0x7, 0xffffffff, 0x1, 0x8, 0xffff, 0x7, 0x8000, 0x4, 0x6, 0x6, 0xffffc2e3, 0x7, 0x7, 0x80000000, 0x2, 0x4, 0x10000, 0x9, 0x0, 0x4, 0x80, 0x5, 0x8001, 0x9, 0x2, 0xffffffff, 0x80000000, 0x1, 0x8, 0x6, 0x8, 0x7, 0x9, 0x100, 0x1, 0x2, 0xfbf, 0x6, 0x400, 0x7ff, 0x0, 0x6, 0x0, 0x5, 0x3ff, 0x6, 0x9, 0x1f, 0x9, 0x5b, 0xfe3, 0x6, 0xbc, 0x6, 0x9b8, 0x0, 0x9121, 0x8000, 0xffffffff, 0xfff, 0x2, 0x10001, 0x9, 0x2, 0x7, 0x4f8e138a, 0xd026f2a, 0xef6, 0x40, 0x1, 0x3, 0x3, 0x4, 0x81, 0x7, 0x6, 0xffffffff, 0x80, 0xc8c, 0xfffffff8, 0x3, 0xfffffffd, 0x1f, 0x9, 0x9, 0x7, 0x100, 0xbc2, 0x5, 0xa70, 0xfffff7bc, 0x5, 0x1, 0x1ff, 0x6133, 0x401, 0x8, 0x1, 0xffffff80, 0x10000, 0x401, 0xff, 0x3, 0x8, 0x81, 0x4, 0x2, 0x3, 0x7, 0x0, 0x8, 0x5, 0x20, 0x0, 0x5, 0x100, 0x7, 0x3, 0x2, 0x4, 0x4, 0x2, 0x6, 0x6ee0, 0x6, 0x332, 0x6, 0x7454, 0x5, 0x6, 0x0, 0x2, 0x4, 0x0, 0x8, 0x3ff, 0x8, 0x800, 0x1, 0xb2b9, 0xb8, 0x401, 0x2, 0x8, 0xffffffe1, 0x80cf, 0x6, 0x3, 0x1, 0x9, 0x20, 0x36, 0x6, 0x3, 0x6, 0x3ff, 0x8000, 0x6, 0x8, 0x0, 0x0, 0x1, 0xffff, 0x6, 0x80, 0x800, 0x4, 0xe7, 0x0, 0x0, 0x5, 0xff, 0x0, 0x4, 0x5, 0x5, 0x80000001, 0x0, 0x6b, 0x5, 0xfffffffd, 0x10001, 0x1, 0x80000001, 0x5, 0x1f, 0xffffff80, 0x1, 0x7, 0x7, 0x4, 0x5, 0x80, 0x8, 0xffffffe0, 0x401, 0x6, 0x8, 0x6, 0x5, 0x4f, 0x8, 0x3, 0xf78, 0x4, 0x7fffffff, 0x6, 0x40, 0x1, 0x400, 0x3, 0x1c000, 0x0, 0x9, 0x3, 0x6, 0x8, 0x0, 0x0, 0x5, 0xffffffc0, 0x3, 0x6, 0x7, 0x100, 0x10001, 0x2, 0x7ff, 0x0, 0x5, 0x8, 0x1f, 0x9f, 0x1faa9e79, 0x0, 0x2, 0x9, 0xcba, 0x5, 0x7, 0x396, 0x3, 0x5, 0x1, 0xfff, 0x5, 0x3, 0x7fff, 0x7, 0x73, 0xffffffff, 0x5, 0x3, 0x80000000, 0x0, 0x0, 0x3f, 0xffffffff, 0x1, 0x2, 0x0, 0x5, 0x20, 0x0, 0x401, 0x5b2, 0x3, 0x0, 0x9, 0x80000001, 0x1, 0x400, 0x5, 0x4, 0x6, 0xacd, 0x0, 0x800, 0x10001, 0xff, 0xffff, 0x40a, 0x3ed1, 0x100, 0x0, 0x9, 0x3, 0x8, 0x200, 0x2, 0xfff, 0x242d, 0x1cb, 0x771c, 0x8, 0x5, 0x4, 0x2, 0x0, 0x448, 0x2, 0x9, 0x4, 0x145, 0x80000001, 0x1000, 0x7, 0x6, 0x0, 0x8, 0x7fffffff, 0x4, 0x1, 0x8, 0x2, 0x200, 0x3f, 0xe4b, 0x3cd8, 0xffffffff, 0x8, 0xe353, 0x3, 0x1, 0x8, 0x5, 0x6, 0x4ff9, 0xd5a, 0x6, 0x10001, 0x6, 0xb4, 0x1, 0x400, 0x2, 0xffffffff, 0x3f, 0x80000001, 0x400, 0x7f, 0x3, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x80000001, 0x3, 0x6, 0x7fff, 0x3, 0xffff, 0x401, 0x7, 0x1, 0x800, 0x3f, 0x800, 0x9, 0x5, 0x3, 0x4, 0x10000, 0x90b, 0x5, 0x8001, 0x7, 0x100, 0xfffffffa, 0x4, 0x0, 0x1, 0x380000, 0x80000000, 0x0, 0x1, 0x7, 0x401, 0x7, 0x5, 0xfffff940, 0xfbaa, 0xd318, 0xfbb, 0x2, 0x100, 0x7f, 0x4, 0x8, 0x0, 0x401, 0xe4, 0x910c, 0x5, 0x1, 0x7fff]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), r2) r3 = accept(r1, &(0x7f0000001100)=@qipcrtr, &(0x7f0000001180)=0x80) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200)=0x4) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000028c0)=[{{&(0x7f0000001240)=@rc, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/77, 0x4d}, 0x6ff56ee2}, {{&(0x7f0000001380)=@xdp, 0x80, &(0x7f0000002580)=[{&(0x7f0000001400)=""/49, 0x31}, {&(0x7f0000001440)=""/151, 0x97}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/126, 0x7e}], 0x4, &(0x7f00000025c0)=""/224, 0xe0}, 0x10001}, {{&(0x7f00000026c0)=@alg, 0x80, &(0x7f0000002840)=[{&(0x7f0000002740)=""/48, 0x30}, {&(0x7f0000002780)=""/140, 0x8c}], 0x2, &(0x7f0000002880)}, 0x1}], 0x3, 0x120, &(0x7f00000029c0)={r4, r5+60000000}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000002a00)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002a40)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000002b80)={0x1c, 0x0, &(0x7f0000002a80)=[@release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x3}], 0x9a, 0x0, &(0x7f0000002ac0)="60e833481a5d0d04f6ece57a7648910e6c97c1054ae75a7e377b911e0c96f63fd105c48a18aaf9959e8549353e4143063dbf21e3db789ea78519ff2f80bf0b5be0a3de4b8bea829d164631aedb41e23123a94525df9784f3c05c073b94afcc263dec45683587ae4b961606c6b76106da6cc8ac576d5d6be6aa8d3f1fe426af40f9fd31b6188870c6cedc5715dfb15063e67a90e41188aba6af83"}) r7 = accept(r0, 0x0, &(0x7f0000002bc0)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002c00)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000002c40)={0x3}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002cc0), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000002e00)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d00)={0xb0, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcb}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x8844) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000002f00)={&(0x7f0000002e40), 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20002000}, 0x80) 23:47:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x626a0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x464, 0x1, 0x70bd2b, 0x25dfdbfc, "dbb9b879f04a", ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x44081) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0x12, 0x100, 0x70bd2c, 0x25dfdbfe, {0x27, 0x1f, 0x7, 0xb9, {0x4e23, 0x4e21, [0x0, 0x20, 0x557], [0x6, 0x80000000, 0x8fab, 0xa13], 0x0, [0x2, 0x1]}, 0x80000001}, [@INET_DIAG_REQ_BYTECODE={0x64, 0x1, "7dcf3962ced0d25b70fd1946e63a2fd466007fe8231703ff98430b616c0df0f60a9557df5bd55dd0a6cb97ffaae646043a06335f7ec6db93ba6b66b570113d78db1402d877a15dacc43292111b3ab3431266fa27cb33a7f71f5fba0a37652caf"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "c74220ab361ceb4e1de3ee4fcb32d8ed598c9236f8d7f1cc343852825997b0a313d6de5e7c488b9c2c706f99f1ca93ffef95f6af63f991004842f150ba6137e3100481ff288088c197ecbe32df5b2fe7fbb30f0ed8b1c15f09926658f3eb249039b28024bee239b2c455bd9a2652144181aa41b01e6d68169ae026fc466b33b0d08d155bafa11f3cad521e475b3515a904b73297254e5c410c729530b3fbf4849d43019e18e6d4014ec88dbac22a63677e89a00700b3e4c85b8fef59"}]}, 0x170}, 0x1, 0x0, 0x0, 0x2000c850}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xea422}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0xcc00) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6b}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x801) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x453, 0xb5a82cf20dcfa0df, 0x9, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/custom0\x00', 0x803, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004050}, 0x1000) r4 = accept(0xffffffffffffffff, &(0x7f00000008c0)=@nl, &(0x7f0000000940)=0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000980)={0x0, 'hsr0\x00', {0x2}, 0x2}) syz_genetlink_get_family_id$net_dm(&(0x7f00000009c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, 0x0, 0x918, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x900, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x801) 23:47:21 executing program 2: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)="aa49285ffba5373ee1c1aa40dc9fea0c430feff71b6344f24ab7005ae7a5c3a99f153c6f6114c9c2336df9b6dd471e392a8ad82530806405fd00211f6fbc1470bcab3f48a37b1b40fa73231e48085312eee93a0159c790e86343c628cf6d7c42a05b580071a7cf0af0063ae0baa543b6828734fe815afe9646bc9951623da6bd2f1182e0aead955bf6cb249ae7136e29c36b44d7bf055ad4e18125a875139265c2f6c9dc23e9e74e5b2e07efc080e2db1956cc87b2044b611f4b8ba261751a7e6bde146e436b22252852159071c67e2b42665c9a6dcbe7a8f477724fed97eba1648e1126ddb4fd4daf88f4c7c4cf1855bb68", 0xf2}, 0x68) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0xfffffffffffffff8, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)="c1f69ec80a9a828c5e3cd7ad3aa2bb1ab7667b97f82a446cd5e8d9f90634720b9388ebe3a23e91bad006d1540984269bf80e2d9f4553ec3fb9bfaeeb973dac1319d6ba152b5d5cef1a6cfcb73c63aaf7661c08179656da04cfc32a284d909dd37767d6513894e07ad5012ad15418aeefb37329122dc15be2cb3dff31c1925691f72f40dbb5", 0x85, r0}, 0x68) get_mempolicy(&(0x7f0000000380), &(0x7f00000003c0), 0x401, &(0x7f0000ffc000/0x4000)=nil, 0x1) r1 = syz_io_uring_setup(0x669c, &(0x7f0000000400)={0x0, 0x98f4, 0x2, 0x3, 0x18b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000500)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000540)=[0x5, 0x7fff, 0x40, 0x4, 0xc39, 0xc0000000], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x82050, r0, 0xfffffffffffffffa) syz_io_uring_setup(0x2735, &(0x7f00000005c0)={0x0, 0x751b, 0x8, 0x2, 0x2c5, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000780)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000700)={0x100, 0x0, 0x8}, &(0x7f0000000740)='./file0\x00', 0x18, 0x0, 0x12345}, 0xfffffff8) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x6) write$tcp_mem(r0, &(0x7f00000007c0)={0x16, 0x20, 0x9, 0x20, 0x5}, 0x48) read$hiddev(0xffffffffffffffff, &(0x7f0000000840)=""/253, 0xfd) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000940)={0xee, "43fd4aa7058437a80c37c66214f43c6e5fc6529d01d7005f14e209a11196746419c610031c9504848a6eb12ca26181f4943b9dab703bf3d68f1b35fbb531cfcb625f0a3c05336bfc758e4d1bf977250e69f2ca8bafba8431b26b719f42c198aac47a976bd70efe9c21bc0379787afb8442f4ff10e67629113d576973de8121569b664a3dd5daa757f6344899fba2d11706dc0116097b23ae85387f9be1027854d17691e61ced0aede29ea65582e5e412e4ce3e0a62d8930c1b0bf363cbbeb32796ff81627065c791818800579b8347210f4959325c50eafa71967979ce7e29bb27c3fd2f4bb53438dbd1bdbb127e"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000a40)="90f17928c35096f4623db64cbdffab8dbe795031bc3cbdbc10e17868", 0x1c, r4}, 0x68) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000b40)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x401}) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000000, 0x50, 0xffffffffffffffff, 0x2) 23:47:21 executing program 3: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x4) socketpair(0x21, 0x6, 0x7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4008005) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0xe635a7bda547ff0c, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x40000000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x400c441) r3 = accept4(r0, 0x0, &(0x7f0000000540), 0x81400) bind$bt_sco(r3, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = accept(r0, &(0x7f00000005c0)=@alg, &(0x7f0000000640)=0x80) recvmmsg(r3, &(0x7f0000003400)=[{{&(0x7f0000000680)=@nfc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/91, 0x5b}, {&(0x7f0000000940)=""/47, 0x2f}, {&(0x7f0000000980)=""/43, 0x2b}], 0x5}, 0x58}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000ac0)=""/252, 0xfc}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f0000000e80)=""/123, 0x7b}, {&(0x7f0000000f00)=""/18, 0x12}, {&(0x7f0000000f40)=""/170, 0xaa}, {&(0x7f0000001000)=""/230, 0xe6}, {&(0x7f0000001100)=""/203, 0xcb}], 0x9, &(0x7f00000012c0)=""/72, 0x48}, 0xfffffff8}, {{&(0x7f0000001340)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001640)=[{&(0x7f00000013c0)}, {&(0x7f0000001400)=""/130, 0x82}, {&(0x7f00000014c0)=""/14, 0xe}, {&(0x7f0000001500)=""/169, 0xa9}, {&(0x7f00000015c0)=""/74, 0x4a}], 0x5}, 0x1}, {{&(0x7f00000016c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/108, 0x6c}, {&(0x7f0000001840)=""/4, 0x4}, {&(0x7f0000001880)=""/49, 0x31}, {&(0x7f00000018c0)=""/153, 0x99}, {&(0x7f0000001980)=""/11, 0xb}, {&(0x7f00000019c0)=""/161, 0xa1}], 0x7, &(0x7f0000001b00)=""/53, 0x35}, 0x200}, {{&(0x7f0000001b40)=@qipcrtr, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)=""/165, 0xa5}, {&(0x7f0000001c80)=""/193, 0xc1}, {&(0x7f0000001d80)=""/50, 0x32}, {&(0x7f0000001dc0)=""/160, 0xa0}, {&(0x7f0000001e80)=""/6, 0x6}], 0x5, &(0x7f0000001f40)=""/25, 0x19}, 0x516b}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/130, 0x82}, {&(0x7f00000020c0)=""/53, 0x35}, {&(0x7f0000002100)=""/100, 0x64}, {&(0x7f0000002180)=""/116, 0x74}], 0x4, &(0x7f0000002240)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003240)=@nfc, 0x80, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/151, 0x97}, {&(0x7f0000003380)=""/39, 0x27}], 0x2}, 0xc6}], 0x7, 0x120, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003600), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000003740)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003700)={&(0x7f0000003640)={0x90, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000003780), r3) sendmsg$AUDIT_SET(r3, &(0x7f0000003880)={&(0x7f00000037c0), 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x38, 0x3e9, 0x2, 0x70bd26, 0x25dfdbff, {0xf, 0x1, 0x1, 0x0, 0x7fff, 0x10001, 0x1, 0x3, 0x0, 0x5}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003900), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8012}, 0x24000040) recvmmsg(r4, &(0x7f0000004200)=[{{&(0x7f0000003a00)=@phonet, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/8, 0x8}], 0x1, &(0x7f0000003b00)=""/36, 0x24}, 0x73}, {{&(0x7f0000003b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003bc0)=""/211, 0xd3}], 0x1, &(0x7f0000003d00)=""/130, 0x82}, 0x9}, {{&(0x7f0000003dc0)=@nfc, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e40)=""/175, 0xaf}], 0x1}, 0x1000}, {{&(0x7f0000003f40)=@generic, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003fc0)=""/152, 0x98}, {&(0x7f0000004080)=""/161, 0xa1}, {&(0x7f0000004140)=""/97, 0x61}], 0x3}, 0x5ee}], 0x4, 0x2001, &(0x7f0000004300)={0x0, 0x989680}) recvmmsg(r8, &(0x7f00000085c0)=[{{&(0x7f0000004340)=@nfc_llcp, 0x80, &(0x7f0000004500)=[{&(0x7f00000043c0)=""/174, 0xae}, {&(0x7f0000004480)=""/119, 0x77}], 0x2, &(0x7f0000004540)=""/52, 0x34}, 0x2}, {{&(0x7f0000004580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004600)=""/137, 0x89}], 0x1, &(0x7f0000004700)=""/211, 0xd3}, 0x7ff}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000004800)=""/121, 0x79}, {&(0x7f0000004880)=""/169, 0xa9}, {&(0x7f0000004940)=""/25, 0x19}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/236, 0xec}], 0x5, &(0x7f0000005b00)=""/216, 0xd8}, 0x8}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000005c00)=""/211, 0xd3}, {&(0x7f0000005d00)=""/254, 0xfe}, {&(0x7f0000005e00)=""/139, 0x8b}, {&(0x7f0000005ec0)=""/208, 0xd0}, {&(0x7f0000005fc0)=""/144, 0x90}, {&(0x7f0000006080)=""/33, 0x21}, {&(0x7f00000060c0)=""/74, 0x4a}, {&(0x7f0000006140)=""/90, 0x5a}, {&(0x7f00000061c0)=""/214, 0xd6}], 0x9, &(0x7f0000006380)=""/67, 0x43}, 0x80000000}, {{0x0, 0x0, &(0x7f0000008500)=[{&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)=""/205, 0xcd}], 0x3, &(0x7f0000008540)=""/66, 0x42}, 0x1}], 0x5, 0x100, &(0x7f0000008700)={0x0, 0x989680}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000008840)={&(0x7f0000008740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008800)={&(0x7f0000008780)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe010}, 0x4000010) 23:47:21 executing program 4: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000001c0)={0x3, 0xffffffff, 0xfffffffe}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x401) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x22, 0x6, 0x2) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x40a200) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f00000002c0)={0x1, 0x3, 0x1, 0x3, 0x3, 0x9, 0x0, 0x7, 0x4, 0x1ff, 0x2, 0x3d, 0xfffffffe, 0x8}) syz_open_dev$hiddev(&(0x7f0000000300), 0xc987, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000340)={0x7, 'bond0\x00', {0x3}, 0x8001}) r3 = accept(r1, 0x0, &(0x7f0000000380)) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000003c0)=""/175, &(0x7f0000000480)=0xaf) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x453, 0x100, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x2, 0x30a80) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000600)) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x464, 0x800, 0x70bd28, 0x25dfdbff, "5234e57c8497ba87b9c16f93682b98ae6f2ab647f0c1dac2e55ea7c20854610d2c99fadd10b7bc39c923ae7f60", [""]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40001) [ 87.851418] audit: type=1400 audit(1737762441.729:7): avc: denied { execmem } for pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:47:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x913}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x38a0}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = accept(r0, &(0x7f0000000900)=@nfc_llcp, &(0x7f0000000980)=0x80) r4 = syz_open_dev$vcsu(&(0x7f00000009c0), 0x80000000000, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), r3) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000d80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2b4, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x240, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4dff3c0cfde5c436a49c01dae371b13f202ce0e1c50f6a6c8aa480c16324a153"}]}, {0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe000}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x14}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x6c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x91e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) recvmsg(r2, &(0x7f0000001300)={&(0x7f0000000f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)=""/90, 0x5a}, {&(0x7f0000001040)=""/250, 0xfa}, {&(0x7f0000001140)=""/158, 0x9e}], 0x3, &(0x7f0000001240)=""/174, 0xae}, 0x12000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001440), 0xffffffffffffffff) write$tcp_mem(r4, &(0x7f0000001480)={0x5, 0x20, 0x8, 0x20, 0x1}, 0x48) r8 = accept4(r0, 0x0, &(0x7f0000001500), 0x80800) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x44, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xfff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 23:47:21 executing program 6: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x8, 0x17, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004800) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe0e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc38d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r0, 0x100, 0x70bd28, 0x6, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2012729}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x4000101) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff52}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x24044810) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000980), r4) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r8, 0x214, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4000) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, 0x3ed, 0x100, 0x70bd2b, 0x25dfdbfe, "e7b6ad4a95cf1316d65e7af68d41806607d480bf4df8d8288c53f37ffeda97571d6012f192253f6b062ea6356eb6646d59b81ec84a5024023dd069c7a6fa41d95eee09b5632a44ccebdce1c1b4400ab801a9068a46d54955874b5fbb3b4d6a6abf629cce14243fcedc1317c77d4a00a2dc235f8236badd7098da976afc2e149341341dece34c3c1066fa68e30346078665", ["", "", "", "", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040100}, 0x1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0xc0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2209}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xcd50b5aff5963c2d}, 0x10) 23:47:21 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x10001, 0x2841) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x2, 0xffffffff, 0x8001}) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000080)={{0x2, 0x200, 0x401, 0x273, 0x1, 0x2}, 0x37b, [0x0, 0xff, 0x0, 0x80, 0x5, 0x80000001, 0x92c5, 0x3, 0x3f, 0xc0000, 0x8, 0xfffffffd, 0x7, 0xbdb5, 0x8, 0x7, 0xf72d, 0x1, 0x425f, 0x9, 0x50, 0x0, 0x0, 0x3, 0x3ff, 0x6, 0x10000, 0x10000, 0x7, 0x7, 0x0, 0xffff, 0x24000000, 0xff, 0x8, 0xffffffff, 0x9, 0x5, 0xa860, 0x8, 0x5, 0x26, 0x7, 0x7fffffff, 0x0, 0x5b, 0x100, 0xfffffffd, 0x0, 0x6, 0x3f, 0x6, 0x9, 0x3ff, 0x5, 0x7f, 0x21, 0x2, 0x8, 0xfffffffe, 0x8, 0xffffffc1, 0x2, 0x20, 0x2, 0x8001, 0x9, 0x5, 0x80000000, 0x4, 0x80000001, 0x5, 0x3, 0x1, 0x5, 0x8, 0x3ff, 0x7, 0x10000, 0x8001, 0x10001, 0xfff, 0x38097fc5, 0x3, 0x8c39, 0x8, 0x5, 0x3, 0xc4, 0x3fda, 0x1, 0x7fffffff, 0x800, 0x7, 0x7ff, 0x40, 0x5, 0x4, 0x3, 0x1ff, 0x10001, 0x4, 0x9, 0xff, 0x3, 0x782e, 0x54b6d3ce, 0x1, 0xfffff78f, 0x8001, 0x7f, 0x3, 0x6, 0x4, 0x101, 0x7, 0x7ff, 0xa3c1, 0x95, 0x0, 0x4, 0x0, 0x8, 0x7fff, 0x9, 0x7fffffff, 0x27, 0x0, 0x8, 0x20, 0x8, 0x6, 0x6, 0x6, 0xffff, 0x10001, 0xb62, 0x7, 0x81, 0x1a85, 0x1000, 0x8, 0x7, 0xfffffffb, 0x165, 0x4, 0x9, 0x2, 0x9, 0x80000000, 0xb61f, 0x5, 0x6, 0x0, 0x0, 0x68, 0x1, 0x0, 0xc1d, 0xfffffffc, 0x2800000, 0x7, 0x2, 0xa21, 0x1, 0x8, 0x6036dc05, 0x7fffffff, 0x1, 0x2, 0x7, 0x5, 0x1, 0x8, 0x5, 0xfff, 0x40, 0x192, 0x9791, 0xb, 0x1, 0x81, 0xa9d, 0x8, 0x7fffffff, 0x0, 0x3, 0x7ff, 0x2, 0x4, 0x40, 0x7, 0x1, 0x9, 0x5, 0x5, 0xc158, 0x0, 0x8e, 0x6, 0x50000, 0x5, 0x8, 0x81, 0xd13, 0x6, 0x5, 0x80000001, 0xa0, 0x7, 0x2, 0x9, 0x6, 0x5, 0xc7b7, 0x7, 0x5, 0x7, 0x1, 0x9, 0x3, 0x1b, 0x1, 0x6, 0x72, 0x2, 0x1, 0xff, 0x10001, 0x7e50, 0x80000001, 0x3, 0x9, 0x2, 0x5, 0xf989, 0x10001, 0x5, 0x7, 0x101, 0xae1f, 0x4, 0x1000, 0x6a12f0ff, 0xdc, 0xffffffc0, 0xe51, 0x8, 0x7, 0x100, 0x2, 0xd5b, 0x6, 0x333d, 0x5, 0x4, 0xa6, 0x401, 0x7, 0x800, 0x8000, 0x1, 0x4, 0x81, 0x0, 0x5, 0x5, 0xff, 0x1, 0x26d2, 0x9, 0x4, 0x101, 0x7, 0x1, 0x9, 0x6, 0x7f, 0x64, 0x3, 0xd3, 0x101, 0x0, 0x1, 0x8, 0xfffff001, 0x8, 0x5, 0x7, 0x9, 0x79126ba8, 0xb693, 0x0, 0x0, 0x4, 0x9, 0x20000000, 0x7, 0xb4, 0x8d2, 0x4, 0x81, 0x4, 0x4, 0x2, 0x9, 0x8000000, 0x4, 0xffad, 0xb5, 0x8, 0x3, 0x800, 0x2, 0x8, 0x6cb, 0x7, 0x3, 0x1, 0x7, 0x655, 0xd594, 0x1, 0x7f, 0x1, 0x543c, 0x7, 0x0, 0xe04, 0x1ff, 0x400, 0xfffffffe, 0x0, 0x100, 0x20, 0x6, 0x3, 0x6, 0x7, 0x80000000, 0x3, 0x1f3f, 0x4, 0x9, 0x8001, 0x31a, 0x3a7, 0x6, 0x8, 0xffff4719, 0x3, 0xffffffe0, 0x0, 0x80000001, 0x8, 0x80000001, 0xffffffff, 0x2, 0x1000, 0x800, 0x3ff, 0x6, 0xc0000000, 0x3f33, 0x8, 0x7, 0x2, 0x9, 0x2, 0x1000, 0x800, 0x5, 0x3f, 0xffff, 0x6, 0x8, 0x400, 0x1, 0x1f, 0x6, 0x80000001, 0x55, 0x5, 0x5, 0xaa77, 0xffffffff, 0xf1af, 0x2, 0x3c3, 0x444c, 0x5, 0xffffffff, 0xffff, 0x3, 0x93f, 0x3, 0x4, 0x7, 0x8000, 0xfffffaab, 0x8, 0xffff0001, 0x6, 0x1, 0x7, 0xaa50000, 0x8000, 0x8, 0x6, 0x5, 0x3f, 0x7, 0x2d1d, 0x728, 0x81, 0x2, 0x7, 0x3, 0x5, 0x3, 0x2, 0xe0000000, 0x0, 0x58a538dd, 0xfffffffb, 0x40, 0x3, 0x1ff, 0x5, 0x9, 0x10000, 0x6, 0x7, 0x6, 0xc8d, 0xff, 0x0, 0x4f5c800, 0x8, 0x2, 0xfffffffd, 0x3ff, 0x7fffffff, 0x6, 0xf2d, 0x340, 0xac, 0xfffffe01, 0x1000, 0xfffffff7, 0x9, 0x2, 0xa8a9, 0x3, 0x2, 0x0, 0x7, 0x8001, 0x0, 0x1, 0x0, 0x800, 0xaf5, 0x9, 0x8d5, 0x7fffffff, 0x2, 0x0, 0x5, 0x7, 0x7, 0x8, 0x7, 0x7, 0x4c43, 0x4000800, 0xb3, 0x0, 0x7fff, 0x7, 0x0, 0x3, 0x0, 0x2, 0x4, 0x51, 0x2, 0x0, 0x3, 0x8000, 0x6, 0x8, 0xc7, 0x0, 0xf4, 0x7, 0xa3, 0x6, 0x9, 0x1, 0x4, 0x0, 0x9, 0x8, 0x1, 0xffffffff, 0xffff, 0x1, 0x7, 0xda, 0x9, 0x0, 0x4, 0x8000, 0xe9b6, 0x6, 0x6, 0x1000, 0x9, 0xffffffff, 0x4e12f294, 0x2, 0x2edb, 0x80000001, 0xfff, 0x7, 0x3ff, 0x1000, 0x4, 0xf578, 0xffffffff, 0x5, 0xe7, 0x8, 0x9, 0x3c42, 0x96, 0x9, 0x6, 0x8001, 0x101, 0xffff, 0x401, 0x3, 0x0, 0xd9a5, 0x20, 0x8, 0x1, 0x848e, 0x5551285f, 0x5, 0x4, 0x7f, 0x800, 0x0, 0x2, 0xffffffff, 0xffffffff, 0x1ff, 0x13f8, 0x6, 0x0, 0x5ed9, 0x7f, 0x5, 0x7, 0x8, 0x832, 0x4, 0x9, 0x7, 0x60000000, 0x7098, 0x7dd, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x6, 0x7, 0x3a, 0xff, 0xffffdf29, 0x81, 0x5, 0x81, 0x8001, 0xffff, 0x7a5d5488, 0x7fffffff, 0x20, 0x9, 0x7, 0x7, 0x9df, 0x7f, 0x8001, 0xfffffff7, 0x2, 0x101, 0x3, 0x1, 0x800, 0x1, 0xf7c, 0x7, 0x80, 0x10000, 0x5, 0x8, 0x0, 0x5, 0x0, 0x0, 0x3, 0x7, 0xed, 0x6, 0x80, 0x100, 0xffff, 0xfffffff8, 0x5, 0x2, 0x101, 0x8001, 0x1f, 0x7fffffff, 0x4, 0x4, 0x0, 0x8000, 0x0, 0xc263, 0x5, 0x2, 0x2, 0xfff, 0x3ff, 0x1000, 0x800, 0x0, 0x5, 0x0, 0x8, 0x5, 0x32, 0x3, 0x1f, 0x400, 0x1, 0xfff, 0x140, 0x6, 0x69, 0x7, 0x7fffffff, 0x9, 0x4, 0x8, 0xffffffff, 0x40, 0x694a, 0xa6b, 0x7fff, 0x3, 0x2, 0x2ef, 0x1, 0x8, 0x7d, 0x1, 0xfffffffa, 0x80000000, 0x0, 0xffffffe4, 0x4, 0x2, 0x4, 0x9, 0x9, 0x6, 0x14a4, 0x0, 0x40d7, 0x6, 0x200, 0x1, 0x478d, 0x7, 0x100000, 0x800, 0x81, 0x6, 0x0, 0xb3, 0x4, 0x7, 0x7, 0x3, 0x4, 0x6, 0x1ff, 0x5, 0x876, 0x2, 0xffffffff, 0x47c6, 0x7, 0x4, 0x6, 0x80, 0x10000, 0xc5ac, 0x1, 0x9, 0x7, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x3, 0x400000, 0x1000, 0x5, 0x40, 0x9, 0x4, 0xffffffc1, 0x1, 0x0, 0x1, 0x9, 0x3, 0x7fff, 0x2a, 0x0, 0x9, 0xfffffffe, 0x8d, 0x8, 0x52e2a1ed, 0x7fff, 0x5, 0x400, 0x2, 0x7f, 0x0, 0x1, 0x6, 0x15b2, 0x509f34b7, 0x56, 0x9, 0x1f, 0x3ff, 0x7c, 0xcfa8, 0x5, 0x6, 0x3, 0xffffffff, 0x0, 0x3, 0x5, 0x8, 0x1, 0x10001, 0x9, 0x1, 0x1b, 0x7fff, 0x10000, 0xb2, 0x5, 0x108f, 0x4, 0x5, 0x2, 0xe508, 0x7f, 0xffffffff, 0x200, 0x20, 0x9, 0x8d, 0x0, 0xffffffff, 0x1, 0x2, 0x7093, 0x1ff, 0x0, 0x6, 0x147, 0x4d, 0xdf, 0x8000, 0x80, 0x3, 0xadac, 0x1, 0x4, 0x1f, 0xe0, 0x4, 0x3, 0xd, 0x4, 0x0, 0x9, 0x6, 0x7, 0x8, 0x80, 0x80000001, 0xff, 0x2, 0x100, 0x1, 0xfffffe00, 0x80000000, 0x3, 0x4, 0x9, 0x6, 0x46b, 0x5, 0x0, 0xc0000000, 0x14f, 0x7, 0x1, 0x6, 0x3, 0x7, 0x1, 0x7ff, 0x7, 0x7ff, 0x6, 0xc4, 0xc3, 0xfff, 0x0, 0x6, 0x6, 0x1, 0xec, 0x7, 0x3, 0x9, 0x9, 0x3f, 0x9, 0x800, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0xc19, 0x1, 0x81, 0x8, 0xff, 0x6, 0x101, 0x80000000, 0x0, 0x1, 0x1000, 0xffff2b79, 0x0, 0x7, 0x3ff, 0x4, 0x6, 0xff, 0x8, 0x7f, 0x1, 0xfff, 0x6, 0x6, 0x404000, 0x1, 0x4, 0x401, 0x9, 0xd5, 0x7, 0x7ff, 0xffffff80, 0x7, 0x2, 0xffffffff, 0x0, 0x8001, 0x6d, 0x7fff, 0x548, 0x2, 0x3ff, 0x4, 0x8000, 0x0, 0xf34d, 0x8000, 0x7, 0x8, 0xfffffff8, 0x7fff, 0x9, 0xffff, 0x1ffe00, 0x0, 0x226, 0xca9f, 0x9, 0x9, 0x7, 0x81, 0x5, 0x4, 0x101, 0xf2, 0x7fffffff, 0x1, 0xfffffffb, 0x3ff, 0x3ff, 0x101, 0xff, 0x9, 0xe15, 0x101, 0x8, 0x8, 0x1, 0x1, 0xffffff81, 0x6, 0x25d, 0x1ff, 0x5a5, 0xffffff44, 0x3, 0x7dc, 0x1, 0x7, 0xffff, 0x0, 0xffffffff, 0x7fffffff, 0x0, 0x4, 0x9, 0xd90, 0x7ff, 0xd284, 0x7, 0x9, 0xea, 0x1, 0x3, 0x6, 0x2, 0x5, 0x55, 0x2, 0x9, 0x7fff, 0x101, 0x20, 0x2000000, 0x800, 0x7fff, 0x0, 0x2, 0x3, 0x9, 0x81, 0xffff, 0x1ff, 0x3, 0x4, 0x8, 0x9, 0x8, 0xd085bb3, 0x2, 0x7ff, 0x80b, 0x1, 0x9000, 0x6, 0x311b, 0x10000, 0x7fffffff, 0xf4e, 0xd4f, 0x81, 0x2, 0x40, 0x8001, 0x5, 0x1, 0x0, 0x8001, 0x1, 0x5d0, 0x5, 0x4, 0x200000, 0x1, 0x2]}) r1 = syz_open_dev$hiddev(&(0x7f00000010c0), 0x9, 0x80) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000001100)) r2 = syz_open_dev$vcsu(&(0x7f0000001140), 0x9, 0x80) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001180)=@gcm_128={{0x304}, "da7e875283b5c348", "bbad8955d0cc78f4655d077e521d339e", "50bd8f42", "995e2fc3eb3503c1"}, 0x28) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x3f2, 0x400, 0x70bd2a, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = syz_open_dev$usbmon(&(0x7f0000001340), 0x6, 0x100082) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001380)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000012c0)="0a2df0059fad724868d41c378a0f090feed0bdf9b6f8cc5a02d833362a6702b8722f0dbba4d0f8e80342711afe684608c3b15b3f467715f3239af52e4241b8389c1001a3f936eb78e2c4c5b3d4ccf86cc30562cddc8d3975", 0x58, r3}, 0x68) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001400)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000001440)={{0x1, 0x200, 0x8000, 0x8, 0x7, 0x8}, 0x1ec, [0x4, 0x6, 0x4, 0x16f0, 0x7ff, 0x400, 0x9, 0x77f, 0x40, 0x2, 0x8, 0xb55e, 0x2c, 0x0, 0x1000, 0x6, 0x7fff, 0x69ca, 0x9239, 0x2, 0x4, 0x5e, 0x40, 0x1b, 0x10000, 0x7, 0x7, 0x1ff, 0xe1, 0x4, 0x3ff, 0x2, 0x8, 0x1, 0x0, 0x50f, 0xdf7, 0x9, 0x65b0, 0x7ff, 0x3, 0x6, 0x10001, 0x401, 0xffff, 0x0, 0x2, 0x2, 0x5, 0x1, 0x9, 0x7, 0x1, 0x6, 0x3, 0x200, 0xfffffffd, 0xe4, 0x2, 0xffff8000, 0xe44, 0x1, 0x0, 0x200, 0x2, 0x400, 0x2, 0x6, 0x8685, 0xfffffff9, 0xa2, 0x8, 0x8, 0x4, 0x66c, 0x401, 0xfffff666, 0x80000001, 0x80, 0x2, 0x5e1, 0x8000, 0x4, 0x9, 0x3f8, 0x6, 0x3, 0x3, 0x7, 0x3, 0x4, 0x5, 0x7, 0x8000, 0x1c, 0x400, 0x3ff, 0x8, 0x800, 0x6, 0x1, 0x4, 0x5, 0x0, 0x998, 0xb51, 0xbf, 0x5, 0x4, 0xfff, 0x0, 0x401, 0x10000, 0x1, 0x9, 0x8, 0x5, 0x8, 0x5, 0x4, 0x0, 0x8, 0x7, 0xfffffffb, 0x2, 0xb9a, 0x9, 0xed0a, 0x5, 0x3ff, 0x101, 0x1ff, 0xffffffff, 0x1, 0x1, 0x80000000, 0x3, 0x20, 0x9, 0x8, 0x1, 0x8, 0x3f, 0x2, 0xa1, 0x2, 0x4, 0x7, 0x4, 0xab, 0x5, 0x3, 0x0, 0xe03e, 0x4, 0x69, 0x7, 0xe3, 0x2, 0x2, 0x5, 0x1, 0x9, 0x81, 0x81, 0x8000, 0x80000000, 0x8000, 0x8000, 0xfffffc00, 0x4, 0x101, 0xf87, 0x100, 0xff, 0x1, 0x4, 0xb71, 0x3da, 0x3, 0x2, 0x0, 0x2, 0x3bd, 0x5173, 0x4bff, 0xca37, 0x8000, 0x6, 0x8, 0x5, 0x401, 0x9, 0xf1f4, 0x2, 0x927, 0x5, 0x1, 0x401, 0xac, 0x80000000, 0x280, 0x9, 0x7fff, 0x139, 0xde44a4d0, 0xd4b, 0x1, 0xff800000, 0x6, 0x8001, 0x5b4766f0, 0xfffffbff, 0x100, 0x6, 0x7fff, 0x2, 0x5, 0x7ff, 0x4, 0x1, 0x80, 0x8, 0x3, 0xbbd9, 0x80, 0x7ff, 0x9, 0x7, 0x7ff, 0x7, 0x7, 0x2, 0x10001, 0x8001, 0x100, 0x0, 0x7, 0x3, 0x101, 0x3, 0x1, 0x7, 0x1, 0x8000, 0x4, 0x4, 0x3b90a379, 0x100, 0x8001, 0xef9, 0x3, 0x5, 0x52, 0x8000, 0x40, 0x7, 0x0, 0x9, 0x4, 0x2, 0x0, 0x401, 0x8, 0x0, 0x5, 0x72f24f67, 0x20, 0x4, 0x290d, 0x9, 0x2f888a8a, 0x1, 0x5, 0x3, 0x800, 0x7f, 0x1, 0xfffffffa, 0x8, 0x4ef, 0x9, 0x6df, 0x7ff, 0x6, 0x1, 0x5, 0x7, 0x7fff, 0x7, 0x3, 0x3, 0x10, 0x5, 0x0, 0x3ff, 0x2, 0x6, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x4, 0x0, 0x40, 0x7, 0x7, 0x7, 0x9, 0x1, 0x7fff, 0x20, 0x7, 0x9b95, 0x1ff, 0x6, 0x52c0, 0x6, 0x9, 0x3, 0x9, 0x6, 0x7, 0x6, 0x9, 0x0, 0x1, 0x1000, 0x1, 0xff, 0x100, 0x7ca, 0x92bd5490, 0x1000, 0x3, 0x4, 0x0, 0xfffffffb, 0xfff, 0x8, 0x24, 0x8000, 0x60, 0x10000, 0x5, 0x4, 0x7, 0x81, 0x7e9, 0x5c, 0x5d9, 0x7fffffff, 0x0, 0x0, 0xffff, 0x1, 0x40000, 0x1, 0x0, 0xffffffc7, 0x5, 0x8, 0x7, 0x8, 0x9, 0x0, 0xfff, 0x8001, 0x7fffffff, 0xfed, 0xd240000, 0x8, 0x0, 0x800, 0x5, 0x80000001, 0x1ff, 0x486, 0x3, 0xb624f87, 0x2, 0x3, 0x8, 0x1, 0xfff, 0x400, 0x40, 0x3d7d, 0xa56, 0xfff, 0x80000000, 0x2, 0x9, 0x9, 0x10001, 0x7ff, 0x1, 0x7fff, 0x8, 0x9, 0x43, 0x40, 0x2, 0xff, 0x1019, 0x2, 0x1, 0x486, 0x4, 0x200, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x5, 0xda1, 0x3, 0x20, 0x5, 0xc8, 0x8001, 0xae, 0x401, 0x2, 0xffff, 0x1000, 0x8, 0x400, 0x80000000, 0x2, 0x1ff, 0x6, 0xdc1, 0x5d, 0xce, 0xff, 0x3304, 0xa0, 0x3f, 0x55, 0x7fff, 0xac, 0x10000, 0x80000000, 0xfffffffb, 0x8000, 0x0, 0xae02, 0xfff, 0x7ff, 0x8001, 0x10000, 0x355f, 0x0, 0x7, 0x4, 0x7, 0x8, 0xf01, 0x9a2d, 0x9, 0x1, 0x3a3, 0x5, 0x2, 0x280000, 0x2, 0xffffffff, 0xfffffff9, 0x4, 0x1, 0x1, 0x1, 0x861, 0x6, 0x4, 0x39912be2, 0x8000, 0x4, 0x7fffffff, 0x1, 0x2, 0x7f9, 0x4, 0x401, 0x8, 0xb72, 0x8, 0x29, 0x5, 0x3, 0x1, 0x80000001, 0x6, 0x5, 0x3ff, 0x7, 0x8, 0xfff, 0x200, 0x800, 0x8, 0x6, 0x9, 0xfffffffd, 0x9, 0x6, 0xffff000, 0x8, 0x2, 0x1df92684, 0x80000000, 0x3ff, 0x5, 0xf71, 0x6, 0x7fff, 0x140, 0x6, 0x3, 0x101, 0xb5, 0x7, 0x4, 0x6, 0x7, 0x3, 0x523, 0x40, 0x8a24, 0x200, 0x0, 0x7fff, 0x1, 0x1f, 0x6, 0x0, 0x3, 0x5, 0x7, 0x9, 0x2, 0x8, 0x4, 0x2, 0x1000, 0x3f, 0x3, 0x26, 0x4, 0x3, 0x8, 0x7, 0x2, 0x4, 0x8, 0x4, 0x8f6f, 0x401, 0xdb, 0xfffffffe, 0xfff, 0x3, 0x80, 0x9, 0x8001, 0x8, 0xffff, 0xffffffff, 0x9, 0x1f, 0x67, 0x2e, 0x1f, 0x96f, 0x10000, 0x7, 0x0, 0x0, 0x88, 0x6, 0x3, 0x6, 0x20, 0x6, 0xc5f8, 0xffff, 0x9, 0x3, 0x0, 0x19, 0x8001, 0x101, 0x15, 0x1, 0xc01, 0xffffffc8, 0xfffffffa, 0x7, 0x2, 0x0, 0x7, 0xffffffff, 0x400, 0x0, 0x1f, 0xc0, 0x1000, 0x8, 0x80000001, 0x2, 0x0, 0x3, 0x0, 0x7, 0x7, 0x1, 0x8001, 0x2, 0x6, 0x2, 0x3, 0x1ff, 0x4d, 0x9, 0x200, 0x9, 0x4, 0x3, 0x3, 0xfffffffc, 0x101, 0x3, 0xfffffffe, 0x98, 0x91, 0x9, 0x1840, 0x1, 0x401, 0x2, 0x4, 0xfff, 0x9, 0x4f93, 0xe6e7, 0x5, 0x3, 0x464f, 0x800, 0x5, 0x6ec, 0x1, 0x1, 0x7, 0xfffffc01, 0x9, 0xf8, 0x1, 0x1f, 0x7, 0x0, 0x3, 0x9, 0x4, 0x7fff, 0x0, 0x1f, 0x3, 0x7, 0x2, 0x200, 0x10000, 0xdaec, 0x0, 0x80000001, 0xfffffff9, 0x400, 0x1, 0xc1f, 0x144a3115, 0x2, 0x76, 0x10000, 0x0, 0x800, 0x0, 0xe90f, 0x5, 0x11, 0xdcd, 0x6, 0xffffffff, 0x1000, 0x5840, 0xfffffff8, 0xfffffff8, 0x2, 0x7fffffff, 0x8000, 0x8, 0x1, 0x80000000, 0x5, 0xea7, 0x4, 0x401, 0x7, 0x6, 0x0, 0xffffffc1, 0x3f, 0x2, 0x5, 0x3, 0x4, 0x400, 0x1, 0x2, 0x200, 0xfe, 0x2, 0x8, 0x401, 0x20, 0x2, 0x1ff, 0x3, 0x1ff, 0x1, 0xfffffffc, 0x4, 0x8, 0x7ff, 0x1, 0xcd, 0x6, 0x6, 0x81, 0x2, 0x2, 0x0, 0x80000001, 0x7, 0x1000, 0x0, 0x5, 0xdfb, 0x1, 0x8, 0x6, 0x1, 0x10001, 0x8, 0x15a, 0xffff8001, 0x4, 0x8, 0x5, 0x0, 0x0, 0x4, 0xe18a, 0xfff, 0x8, 0xd65, 0xf685, 0x0, 0x3ff, 0x8d6, 0x19, 0x0, 0x1ff, 0x4, 0x1f, 0x7, 0x59, 0x0, 0xffffffc3, 0x34f, 0x3354, 0x0, 0x80, 0x101, 0x7, 0x6bd7, 0x9, 0x0, 0x3, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0x80000000, 0x8, 0x7, 0x401, 0x800, 0xef2, 0x0, 0xcf, 0x7, 0x1, 0x6, 0x1, 0x80000000, 0x81, 0xffff, 0x913, 0x32, 0x1f, 0x80, 0x2, 0xb591, 0x5, 0x10000, 0x9, 0xfffffff9, 0x2d, 0x4, 0x6, 0xffffffc1, 0x7a4f, 0x9e17, 0x2, 0x0, 0x9, 0xc0000000, 0x9, 0x3, 0x5c, 0x331, 0x0, 0x5, 0xf0000000, 0x8, 0xfffffffe, 0x9, 0x3f, 0x87, 0xf79, 0x20, 0x200, 0x40000000, 0x8, 0x10001, 0x100, 0x9, 0x7, 0x0, 0x0, 0x5, 0x6, 0x40, 0x6, 0x0, 0xa4c6, 0x8, 0x80, 0x1, 0x0, 0x3, 0x90, 0x3ff, 0xc55, 0x3, 0x1, 0x8000, 0x8, 0x1f, 0xbc2, 0x1, 0x80000001, 0x6, 0x8001, 0x9, 0xffff, 0x1, 0x8, 0x4, 0x0, 0x80000000, 0xfffffffb, 0xffffff01, 0x5, 0x6, 0x21, 0x3f, 0x20, 0xff, 0x57, 0x9, 0x11fc, 0x2b, 0x1, 0x1, 0x9, 0x8, 0x9, 0x6, 0x5220, 0x5, 0x8, 0x9, 0x10000, 0x0, 0x6, 0x7, 0x1, 0xfe60, 0x3ff, 0xda, 0xb5ce, 0x3, 0x8001, 0x1f, 0x0, 0x7, 0x9, 0xfffffed3, 0x1, 0x7, 0x4, 0x6, 0x3, 0x6, 0x6, 0xf7a9, 0x1, 0xfffffff7, 0x5, 0x3, 0x2a85, 0x7f, 0x2, 0x4, 0x3, 0x7a, 0x5, 0x9, 0x3ff, 0x1, 0x4, 0x6, 0x0, 0xfffffffc, 0x800, 0x9, 0x3f, 0xd5, 0x4, 0x61a00, 0x4, 0x8, 0x3, 0x2, 0x1000, 0xfffffbff, 0x9f, 0x4, 0x2, 0x542, 0x3ff, 0x8, 0xe1e, 0x20, 0x0, 0x9, 0x55a, 0x6, 0x10001, 0x4fb, 0xffffbbf6, 0x20, 0x100, 0x2, 0x7ff, 0x40, 0x5, 0x400, 0xffff8001, 0x3, 0x6, 0x1f, 0x8, 0x80000000, 0x7, 0x5, 0x9, 0x8, 0x2, 0x4, 0x4f49, 0x6, 0x6c900000, 0x10001, 0x1f, 0x88, 0x101, 0xdb1, 0x5, 0x21c, 0x85, 0x1000, 0x8ee1, 0xc7, 0x9, 0x5, 0x1, 0x4, 0x52, 0x8, 0x4, 0x3, 0x1, 0x1f, 0x3, 0x0, 0x21, 0x4, 0x9, 0x8000]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000002480)=@gcm_128={{0x303}, "8700d32887a4cc83", "64bcb02047bee927bf9eb017d4b45dc1", "cb6c1885", "be4b9979c731b00f"}, 0x28) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000024c0)={0x3, 0x3, 0x3, 0x30, 0x1f, 0x5}) r5 = accept4(0xffffffffffffffff, &(0x7f0000002500)=@hci, &(0x7f0000002580)=0x80, 0x800) ioctl$sock_proto_private(r5, 0x89ea, &(0x7f00000025c0)="cb6b135b49397db7ac9e9631f5e965e4a41388990b7e8b6775991fa0346a430453e936e54e1a72eadeedbbbd45ab5131e617a5b0cf244646f5899003f0de29cf3c57e39dc366c0e3ae4a8fe1108b7487a4117f49113a820fffdafc9019e5b4bc529f4d18886285fc40827998e863c829335289463ebf1520a4ac29eeb9c1ed8bb4eac3f5") mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x30, r2, 0xe4e87000) getrusage(0xffffffffffffffff, &(0x7f0000002680)) [ 89.305532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.308507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.310941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.316313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.320494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.322998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.326626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.329244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.331714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.346261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.355083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.365214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.394008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.398197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.402341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.406312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.432117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.434588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.438032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.445227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.449204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.451492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.453671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.455499] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.460209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.468299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.473733] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.476137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.478521] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.484652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.508413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.521115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.525354] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.529595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.539396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.542704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.551076] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.554420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.563702] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.598432] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.600329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.604006] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.607650] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.613510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.615427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.679295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.693300] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.707341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.389000] Bluetooth: hci1: command tx timeout [ 91.450243] Bluetooth: hci0: command tx timeout [ 91.515054] Bluetooth: hci2: command tx timeout [ 91.577919] Bluetooth: hci3: command tx timeout [ 91.578464] Bluetooth: hci4: command tx timeout [ 91.641934] Bluetooth: hci5: command tx timeout [ 91.706012] Bluetooth: hci6: command tx timeout [ 91.769918] Bluetooth: hci7: command tx timeout [ 93.434299] Bluetooth: hci1: command tx timeout [ 93.497937] Bluetooth: hci0: command tx timeout [ 93.561924] Bluetooth: hci2: command tx timeout [ 93.626013] Bluetooth: hci4: command tx timeout [ 93.626570] Bluetooth: hci3: command tx timeout [ 93.692033] Bluetooth: hci5: command tx timeout [ 93.754024] Bluetooth: hci6: command tx timeout [ 93.817975] Bluetooth: hci7: command tx timeout [ 95.482200] Bluetooth: hci1: command tx timeout [ 95.546190] Bluetooth: hci0: command tx timeout [ 95.610042] Bluetooth: hci2: command tx timeout [ 95.674035] Bluetooth: hci4: command tx timeout [ 95.674762] Bluetooth: hci3: command tx timeout [ 95.737932] Bluetooth: hci5: command tx timeout [ 95.801999] Bluetooth: hci6: command tx timeout [ 95.865936] Bluetooth: hci7: command tx timeout [ 97.529894] Bluetooth: hci1: command tx timeout [ 97.593913] Bluetooth: hci0: command tx timeout [ 97.658241] Bluetooth: hci2: command tx timeout [ 97.723064] Bluetooth: hci3: command tx timeout [ 97.724283] Bluetooth: hci4: command tx timeout [ 97.786000] Bluetooth: hci5: command tx timeout [ 97.849978] Bluetooth: hci6: command tx timeout [ 97.913983] Bluetooth: hci7: command tx timeout [ 148.981155] syz-executor.4 (285) used greatest stack depth: 23520 bytes left [ 151.754145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.758926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.761333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.764219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.766211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.773479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.781411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.785469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.787288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.790704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.800186] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.805100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.848195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.850873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.853342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.855531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.861999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.863133] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.867985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.868025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.869015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.871626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.872898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.873732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.875120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.878652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.883377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.884774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.885131] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.885734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.888038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.891174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.892077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.897515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.901215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.903458] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.906425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.907235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.908599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.910516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.911290] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.915028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.976520] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.989657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.990767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.004696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.012352] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.016273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.850981] Bluetooth: hci0: command tx timeout [ 153.850994] Bluetooth: hci1: command tx timeout [ 153.914269] Bluetooth: hci2: command tx timeout [ 154.042913] Bluetooth: hci5: command tx timeout [ 154.042936] Bluetooth: hci7: command tx timeout [ 154.043192] Bluetooth: hci4: command tx timeout [ 154.105935] Bluetooth: hci3: command tx timeout [ 154.170001] Bluetooth: hci6: command tx timeout [ 155.897869] Bluetooth: hci1: command tx timeout [ 155.898119] Bluetooth: hci0: command tx timeout [ 155.962344] Bluetooth: hci2: command tx timeout [ 156.090149] Bluetooth: hci4: command tx timeout [ 156.090189] Bluetooth: hci5: command tx timeout [ 156.091093] Bluetooth: hci7: command tx timeout [ 156.154047] Bluetooth: hci3: command tx timeout [ 156.218005] Bluetooth: hci6: command tx timeout [ 157.946103] Bluetooth: hci0: command tx timeout [ 157.948941] Bluetooth: hci1: command tx timeout [ 158.010883] Bluetooth: hci2: command tx timeout [ 158.138238] Bluetooth: hci5: command tx timeout [ 158.138926] Bluetooth: hci4: command tx timeout [ 158.139489] Bluetooth: hci7: command tx timeout [ 158.201885] Bluetooth: hci3: command tx timeout [ 158.266124] Bluetooth: hci6: command tx timeout [ 159.995005] Bluetooth: hci1: command tx timeout [ 159.995474] Bluetooth: hci0: command tx timeout [ 160.059610] Bluetooth: hci2: command tx timeout [ 160.186934] Bluetooth: hci7: command tx timeout [ 160.187427] Bluetooth: hci4: command tx timeout [ 160.187909] Bluetooth: hci5: command tx timeout [ 160.250933] Bluetooth: hci3: command tx timeout [ 160.314950] Bluetooth: hci6: command tx timeout [ 212.138142] [ 212.138402] ====================================================== [ 212.139034] WARNING: possible circular locking dependency detected [ 212.139616] 6.13.0-next-20250124 #1 Not tainted [ 212.140107] ------------------------------------------------------ [ 212.141404] kworker/u8:1/65 is trying to acquire lock: [ 212.142423] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.144215] [ 212.144215] but task is already holding lock: [ 212.145279] ffff888015510768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 212.147347] [ 212.147347] which lock already depends on the new lock. [ 212.147347] [ 212.148823] [ 212.148823] the existing dependency chain (in reverse order) is: [ 212.150230] [ 212.150230] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 212.150880] __mutex_lock+0x13d/0xb50 [ 212.151344] wiphy_register+0x1b2e/0x25d0 [ 212.151839] ieee80211_register_hw+0x23a4/0x3d60 [ 212.152392] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 212.152954] init_mac80211_hwsim+0x389/0x870 [ 212.153482] do_one_initcall+0xf9/0x640 [ 212.153965] kernel_init_freeable+0x53d/0x7a0 [ 212.154495] kernel_init+0x1e/0x2d0 [ 212.154918] ret_from_fork+0x48/0x80 [ 212.155347] ret_from_fork_asm+0x1a/0x30 [ 212.155840] [ 212.155840] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 212.156459] __lock_acquire+0x29fd/0x4580 [ 212.156942] lock_acquire+0x19b/0x520 [ 212.157391] __mutex_lock+0x13d/0xb50 [ 212.157851] unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.158467] unregister_netdevice_queue+0x224/0x2e0 [ 212.159029] _cfg80211_unregister_wdev+0x57b/0x700 [ 212.159587] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 212.160141] ieee80211_unregister_hw+0x55/0x3a0 [ 212.160678] hwsim_exit_net+0x3a0/0x730 [ 212.161141] ops_exit_list+0xb3/0x180 [ 212.161590] cleanup_net+0x546/0xad0 [ 212.162042] process_one_work+0x8ee/0x1a10 [ 212.162551] worker_thread+0x674/0xe70 [ 212.163083] kthread+0x3ab/0x720 [ 212.163537] ret_from_fork+0x48/0x80 [ 212.163994] ret_from_fork_asm+0x1a/0x30 [ 212.164549] [ 212.164549] other info that might help us debug this: [ 212.164549] [ 212.165295] Possible unsafe locking scenario: [ 212.165295] [ 212.165854] CPU0 CPU1 [ 212.166304] ---- ---- [ 212.166748] lock(&rdev->wiphy.mtx); [ 212.167148] lock(rtnl_mutex); [ 212.167710] lock(&rdev->wiphy.mtx); [ 212.168366] lock(rtnl_mutex); [ 212.168753] [ 212.168753] *** DEADLOCK *** [ 212.168753] [ 212.169364] 4 locks held by kworker/u8:1/65: [ 212.169834] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 212.170900] #1: ffff88800f46fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 212.171945] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 212.172857] #3: ffff888015510768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 212.173767] [ 212.173767] stack backtrace: [ 212.174121] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 212.174159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 212.174182] Workqueue: netns cleanup_net [ 212.174223] Call Trace: [ 212.174236] [ 212.174250] dump_stack_lvl+0xca/0x120 [ 212.174308] print_circular_bug+0x47b/0x750 [ 212.174356] check_noncircular+0x2e9/0x3c0 [ 212.174399] ? __pfx_check_noncircular+0x10/0x10 [ 212.174440] ? hlock_class+0x4e/0x130 [ 212.174471] ? mark_lock+0xac/0xed0 [ 212.174511] ? srso_return_thunk+0x5/0x5f [ 212.174567] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 212.174613] ? lockdep_lock+0xba/0x1b0 [ 212.174671] ? __pfx_lockdep_lock+0x10/0x10 [ 212.174733] __lock_acquire+0x29fd/0x4580 [ 212.174787] ? __pfx___lock_acquire+0x10/0x10 [ 212.174830] ? lock_release+0x20f/0x6f0 [ 212.174874] ? __pfx_lock_release+0x10/0x10 [ 212.174922] lock_acquire+0x19b/0x520 [ 212.174966] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.175015] ? __pfx_lock_acquire+0x10/0x10 [ 212.175060] ? srso_return_thunk+0x5/0x5f [ 212.175116] ? lock_release+0x20f/0x6f0 [ 212.175159] ? srso_return_thunk+0x5/0x5f [ 212.175214] ? lock_is_held_type+0x9e/0x120 [ 212.175270] ? srso_return_thunk+0x5/0x5f [ 212.175329] __mutex_lock+0x13d/0xb50 [ 212.175382] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.175427] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.175473] ? srso_return_thunk+0x5/0x5f [ 212.175528] ? synchronize_rcu_expedited+0x38a/0x420 [ 212.175573] ? __pfx___mutex_lock+0x10/0x10 [ 212.175626] ? __pfx_autoremove_wake_function+0x10/0x10 [ 212.175681] ? srso_return_thunk+0x5/0x5f [ 212.175736] ? kasan_quarantine_put+0x84/0x1e0 [ 212.175797] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 212.175832] ? srso_return_thunk+0x5/0x5f [ 212.175892] unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.175938] ? __virt_addr_valid+0x2e8/0x5d0 [ 212.175991] ? __pfx_lock_release+0x10/0x10 [ 212.176036] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.176082] ? find_held_lock+0x2c/0x110 [ 212.176140] ? srso_return_thunk+0x5/0x5f [ 212.176197] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 212.176263] ? srso_return_thunk+0x5/0x5f [ 212.176327] ? lock_release+0x20f/0x6f0 [ 212.176371] ? __pfx_lock_release+0x10/0x10 [ 212.176415] ? srso_return_thunk+0x5/0x5f [ 212.176470] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.176517] ? srso_return_thunk+0x5/0x5f [ 212.176578] unregister_netdevice_queue+0x224/0x2e0 [ 212.176622] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 212.176665] ? up_write+0x195/0x520 [ 212.176720] _cfg80211_unregister_wdev+0x57b/0x700 [ 212.176774] ? srso_return_thunk+0x5/0x5f [ 212.176833] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 212.176872] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 212.176911] ? srso_return_thunk+0x5/0x5f [ 212.176966] ? srso_return_thunk+0x5/0x5f [ 212.177021] ? synchronize_rcu+0x1ff/0x260 [ 212.177063] ieee80211_unregister_hw+0x55/0x3a0 [ 212.177110] hwsim_exit_net+0x3a0/0x730 [ 212.177153] ? __pfx_hwsim_exit_net+0x10/0x10 [ 212.177194] ? srso_return_thunk+0x5/0x5f [ 212.177249] ? netdev_run_todo+0x788/0x1040 [ 212.177298] ? __pfx_hwsim_exit_net+0x10/0x10 [ 212.177341] ops_exit_list+0xb3/0x180 [ 212.177384] cleanup_net+0x546/0xad0 [ 212.177429] ? __pfx_cleanup_net+0x10/0x10 [ 212.177483] process_one_work+0x8ee/0x1a10 [ 212.177548] ? __pfx_lock_acquire+0x10/0x10 [ 212.177593] ? __pfx_process_one_work+0x10/0x10 [ 212.177651] ? srso_return_thunk+0x5/0x5f [ 212.177706] ? move_linked_works+0x172/0x270 [ 212.177751] ? srso_return_thunk+0x5/0x5f [ 212.177806] ? assign_work+0x196/0x240 [ 212.177864] worker_thread+0x674/0xe70 [ 212.177922] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.177974] ? srso_return_thunk+0x5/0x5f [ 212.178029] ? __pfx_worker_thread+0x10/0x10 [ 212.178089] kthread+0x3ab/0x720 [ 212.178141] ? __pfx_kthread+0x10/0x10 [ 212.178193] ? srso_return_thunk+0x5/0x5f [ 212.178248] ? finish_task_switch.isra.0+0x206/0x840 [ 212.178299] ? __pfx_kthread+0x10/0x10 [ 212.178353] ret_from_fork+0x48/0x80 [ 212.178385] ? __pfx_kthread+0x10/0x10 [ 212.178438] ret_from_fork_asm+0x1a/0x30 [ 212.178504] [ 213.596217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.597569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.600183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.607725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.613106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.615197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.702473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.703840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.708229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.711184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.715726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.718050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.763300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.767432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.768756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.772218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.773973] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.776617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.831876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.836349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.837497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.838608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.839477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.841180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.842943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.847242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.848615] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.852581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.854354] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.861023] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.918875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.923447] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.929993] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.941468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.946069] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.947689] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.985268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.987085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.007065] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.016886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.035138] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.039035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.040487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.048317] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.050192] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.056482] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.087514] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.090251] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.674828] Bluetooth: hci0: command tx timeout [ 215.801860] Bluetooth: hci2: command tx timeout [ 215.801948] Bluetooth: hci1: command tx timeout [ 215.929861] Bluetooth: hci4: command tx timeout [ 215.930358] Bluetooth: hci3: command tx timeout [ 215.993921] Bluetooth: hci5: command tx timeout [ 216.122016] Bluetooth: hci6: command tx timeout [ 216.185983] Bluetooth: hci7: command tx timeout [ 217.721862] Bluetooth: hci0: command tx timeout [ 217.849889] Bluetooth: hci1: command tx timeout [ 217.850854] Bluetooth: hci2: command tx timeout [ 217.977932] Bluetooth: hci4: command tx timeout [ 217.978946] Bluetooth: hci3: command tx timeout [ 218.042234] Bluetooth: hci5: command tx timeout [ 218.169959] Bluetooth: hci6: command tx timeout [ 218.234531] Bluetooth: hci7: command tx timeout [ 219.769833] Bluetooth: hci0: command tx timeout [ 219.897935] Bluetooth: hci2: command tx timeout [ 219.897978] Bluetooth: hci1: command tx timeout [ 220.026407] Bluetooth: hci3: command tx timeout [ 220.027324] Bluetooth: hci4: command tx timeout [ 220.091843] Bluetooth: hci5: command tx timeout [ 220.217908] Bluetooth: hci6: command tx timeout [ 220.281931] Bluetooth: hci7: command tx timeout [ 221.817976] Bluetooth: hci0: command tx timeout [ 221.945888] Bluetooth: hci1: command tx timeout [ 221.945947] Bluetooth: hci2: command tx timeout [ 222.073881] Bluetooth: hci4: command tx timeout [ 222.073898] Bluetooth: hci3: command tx timeout [ 222.138676] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 23:49:26 Registers: info registers vcpu 0 RAX=ffff888008c50378 RBX=ffff888008c50378 RCX=ffffffff81429a4a RDX=ffffffff8640db40 RSI=0000000000000001 RDI=ffffffff85a40680 RBP=ffffffff85a40680 RSP=ffff88800bb1fdb0 R8 =0000000000000000 R9 =ffffed1001804a80 R10=ffff88800c025407 R11=ffff88800f7084b8 R12=ffffffff85a40ff9 R13=ffff888008c50378 R14=ffff88800f708000 R15=0000000000000086 RIP=ffffffff81aeeee7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc2653b000 CR3=0000000034ffc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001ffffffff0000564215a209f0 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005642159f3260ffffffff00000004 XMM06=00000001ffffffff0000564215a584f0 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f46ed20 R8 =0000000000000000 R9 =ffffed10016d6046 R10=0000000000000070 R11=7369786520656874 R12=0000000000000070 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f03fcb20be0 CR3=000000000a0c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fcf7f5981fc2763 XMM02=0000000000000000413055b200000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000